/etc/sysctl.conf values do not apply to vrouter namespace

Bug #1595957 reported by Bartosz Kupidura
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Bartosz Kupidura
7.0.x
Fix Released
High
Ivan Ponomarev
8.0.x
Fix Released
High
Ivan Ponomarev
Mitaka
Fix Released
High
Bartosz Kupidura

Bug Description

Currently net.ipv4.ip_nonlocal_bind is not set inside vrouter namespace.

This can lead to deployment failure with p_dns error:

ocf-ns_dns: INFO: dnsmasq daemon is not running
ocf-ns_dns: ERROR: dnsmasq: failed to create listening socket for 10.109.5.1: Cannot assign requested address
ocf-ns_dns: ERROR: Error. dnsmasq daemon returned error 0.

We had very similar issue in the past: https://bugs.launchpad.net/fuel/+bug/1500871

We need to add
ocf_run $RUN_IN_NS /sbin/sysctl -w net.ipv4.ip_nonlocal_bind=1

To get_ns() in ns_dns and ns_vrouter

no longer affects: fuel/newton
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/333917

Changed in fuel:
assignee: Fuel Sustaining (fuel-sustaining-team) → Bartosz Kupidura (zynzel)
status: Confirmed → In Progress
tags: added: area-library
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/333917
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=244456a3b77074a6cd85fa9d33ebb03ac25decf8
Submitter: Jenkins
Branch: master

commit 244456a3b77074a6cd85fa9d33ebb03ac25decf8
Author: Bartosz Kupidura <email address hidden>
Date: Fri Jun 24 15:58:17 2016 +0200

    Set net.ipv4.ip_nonlocal_bind=1 for vrouter namespace

    Change-Id: I123af7e3b53f9a53fcd9d2818640c0bd4699e024
    Closes-Bug: #1595957

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/mitaka)

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/334415

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/mitaka)

Reviewed: https://review.openstack.org/334415
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=9fa9ee3b5a4c8499c6f3dcc6da0db52cfa08ba16
Submitter: Jenkins
Branch: stable/mitaka

commit 9fa9ee3b5a4c8499c6f3dcc6da0db52cfa08ba16
Author: Bartosz Kupidura <email address hidden>
Date: Mon Jun 27 13:12:29 2016 +0200

    Set net.ipv4.ip_nonlocal_bind=1 for vrouter namespace

    Change-Id: I123af7e3b53f9a53fcd9d2818640c0bd4699e024
    Closes-Bug: #1595957
    (cherry picked from commit 244456a3b77074a6cd85fa9d33ebb03ac25decf8)

tags: added: on-verification
tags: removed: on-verification
Revision history for this message
Tatyana Kuterina (tkuterina) wrote :

Verified on 9.1 snapshot #149

FUEL_QA_COMMIT=6e1902cb46756bfe2f047d300e83c3ad08ec1df7
UBUNTU_MIRROR_ID=ubuntu-2016-08-03-174238
CENTOS_MIRROR_ID=centos-7.2.1511-2016-05-31-083834
MOS_UBUNTU_MIRROR_ID=9.0-2016-08-17-164322
MOS_CENTOS_OS_MIRROR_ID=os-2016-06-23-135731
MOS_CENTOS_PROPOSED_MIRROR_ID=proposed-2016-08-17-164322
MOS_CENTOS_UPDATES_MIRROR_ID=updates-2016-06-23-135916
MOS_CENTOS_HOLDBACK_MIRROR_ID=holdback-2016-06-23-140047
MOS_CENTOS_HOTFIX_MIRROR_ID=hotfix-2016-07-18-162958
MOS_CENTOS_SECURITY_MIRROR_ID=security-2016-06-23-140002

Revision history for this message
Alexander Rubtsov (arubtsov) wrote :

Please backport this fix to 7.0 release

tags: added: customer-found sla1
Revision history for this message
Alexander Rubtsov (arubtsov) wrote :

sla1 for 7.0-updates

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/7.0)

Fix proposed to branch: stable/7.0
Review: https://review.openstack.org/375411

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/7.0)

Reviewed: https://review.openstack.org/375411
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=44fb6b6e32ce7e8944c92b2872f8c838450a50b1
Submitter: Jenkins
Branch: stable/7.0

commit 44fb6b6e32ce7e8944c92b2872f8c838450a50b1
Author: Bartosz Kupidura <email address hidden>
Date: Mon Jun 27 13:12:29 2016 +0200

    Set net.ipv4.ip_nonlocal_bind=1 for vrouter namespace

    Change-Id: I123af7e3b53f9a53fcd9d2818640c0bd4699e024
    Closes-Bug: #1595957
    (cherry picked from commit 244456a3b77074a6cd85fa9d33ebb03ac25decf8)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/8.0)

Fix proposed to branch: stable/8.0
Review: https://review.openstack.org/378524

tags: added: on-verification
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/8.0)

Reviewed: https://review.openstack.org/378524
Committed: https://git.openstack.org/cgit/openstack/fuel-library/commit/?id=5b37064020ae4191c673d474a2ae19aa00f662af
Submitter: Jenkins
Branch: stable/8.0

commit 5b37064020ae4191c673d474a2ae19aa00f662af
Author: Bartosz Kupidura <email address hidden>
Date: Fri Jun 24 15:58:17 2016 +0200

    Set net.ipv4.ip_nonlocal_bind=1 for vrouter namespace

    Change-Id: I123af7e3b53f9a53fcd9d2818640c0bd4699e024
    Closes-Bug: #1595957
    (cherry picked from commit 244456a3b77074a6cd85fa9d33ebb03ac25decf8)

Revision history for this message
TatyanaGladysheva (tgladysheva) wrote :

Verified on MOS 7.0 + MU6 updates.

Actual results:
Before updates:
root@node-6:~# uname -a
Linux node-6.test.domain.local 3.19.0-69-generic #77~14.04.1-Ubuntu SMP Tue Aug 30 01:29:21 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
root@node-2:~# ip netns exec vrouter sysctl net.ipv4.ip_nonlocal_bind
net.ipv4.ip_nonlocal_bind = 0

After updates:
root@node-6:~# uname -a
Linux node-6.test.domain.local 3.19.0-69-generic #77~14.04.1-Ubuntu SMP Tue Aug 30 01:29:21 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
root@node-6:~# ip netns exec vrouter sysctl net.ipv4.ip_nonlocal_bind
net.ipv4.ip_nonlocal_bind = 1

tags: removed: on-verification
tags: added: on-verification
Revision history for this message
TatyanaGladysheva (tgladysheva) wrote :

Verified on MOS 8.0 + MU4 updates.

Actual results:
Before updates:
root@node-1:~# uname -a
Linux node-1.test.domain.local 3.19.0-80-generic #88~14.04.1-Ubuntu SMP Fri Jan 13 14:54:07 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
root@node-1:~# ip netns exec vrouter sysctl net.ipv4.ip_nonlocal_bind
net.ipv4.ip_nonlocal_bind = 0

After updates:
root@node-1:~# uname -a
Linux node-1.test.domain.local 3.19.0-80-generic #88~14.04.1-Ubuntu SMP Fri Jan 13 14:54:07 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
root@node-1:~# ip netns exec vrouter sysctl net.ipv4.ip_nonlocal_bind
net.ipv4.ip_nonlocal_bind = 1

tags: removed: on-verification
tags: added: on-verification
Revision history for this message
TatyanaGladysheva (tgladysheva) wrote :

Verified on 10.0 build #1569.

Actual results:
root@node-1:~# uname -a
Linux node-1.test.domain.local 4.4.0-72-generic #93-Ubuntu SMP Fri Mar 31 14:07:41 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
root@node-1:~# ip netns exec vrouter sysctl net.ipv4.ip_nonlocal_bind
net.ipv4.ip_nonlocal_bind = 1

tags: removed: on-verification
Changed in fuel:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.